Hello!
I'm using flow-tools for collecting flowdata from Cisco router in middle-size
ISP.
My scenario looks like in the picture:
flow-capture flow-export
Router --------------> flow-files -------------> Postgres
detailed
Postgres detailed later aggregated in per IP basis by stored procedure.
Every 15 minute about 3 million of records loaded to the "Postgres detail". This is very large
amount of data wich is very hard to process.
Is any Cisco configuration exaple or guideline for reduce number of flow
entries?
May be "ip flow-cache entries" in exceeded?
Any kind of diagnostics?
--
Artem Hodlevskyy, LCA, Ukraine
Mail: [EMAIL PROTECTED]
WWW: http://lca.lviv.ua/
Phone: +380677768626
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
